Algorithm

ML-DSA

Family: lattice.

ML-DSA is the digital signature standard that NIST derived from the CRYSTALS-Dilithium design. A signer proves control of a private key without revealing it, and anyone can check the signature with the public key. It is fast, with keys and signatures of a few kilobytes, and it keeps no state between signatures. Many protocols and libraries adopt it as the general-purpose post-quantum signature.

Safety: Medium

Why this rating

Security rests on the hardness of Module-LWE and Module-SIS, which are structured-lattice problems. These have been studied for years without a practical attack on the standardized parameters, but their cryptanalysis is younger than that of hash functions. Side-channel leakage in implementations is an additional risk.

Standard

https://csrc.nist.gov/pubs/fips/204/final

Research

• CRYSTALS-Dilithium (2017)
• FIPS 204: Module-Lattice-Based Digital Signature Standard

Implemented by

• aws-lc-rs
• liboqs
• PQClean
• pqhybridsign
• qp-rusty-crystals